Skip to content

Conversation

jprusik
Copy link
Contributor

@jprusik jprusik commented Aug 8, 2025

🎟️ Tracking

PM-5756

📔 Objective

This workflow listens for the completion of the "Build Browser" workflow. If relevant changes were found on the branch that initiated the build workflow, a workflow event will be dispatched to BIT. Workflows in BIT may then trigger on that event.

Planned usage of this event in BIT includes kicking off the Test-all and Test-all-custom-flags workflows and having those events post comments back to the original PR with success/failure messages (this PR on it's own does not trigger any tests).

corresponding BIT work: bitwarden/browser-interactions-testing#373

🦮 Reviewer guidelines

  • 👍 (:+1:) or similar for great changes
  • 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
  • ❓ (:question:) for questions
  • 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion
  • 🎨 (:art:) for suggestions / improvements
  • ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
  • 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
  • ⛏ (:pick:) for minor or nitpick changes

@jprusik jprusik self-assigned this Aug 8, 2025
Copy link

codecov bot commented Aug 8, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 36.77%. Comparing base (04489b9) to head (299d5aa).
⚠️ Report is 5 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #15960      +/-   ##
==========================================
- Coverage   36.78%   36.77%   -0.02%     
==========================================
  Files        3233     3233              
  Lines       92009    92039      +30     
  Branches    13796    13793       -3     
==========================================
+ Hits        33844    33845       +1     
- Misses      56781    56809      +28     
- Partials     1384     1385       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copy link
Contributor

github-actions bot commented Aug 8, 2025

Logo
Checkmarx One – Scan Summary & Detailsae8b777f-db90-4258-8191-cbf825584d9e

New Issues (1)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
LOW CVE-2024-6531 Npm-bootstrap-4.6.0
detailsRecommended version: 5.0.0
Description: A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel com...
Attack Vector: NETWORK
Attack Complexity: HIGH

ID: Ak1kxkfdgJ%2Bq%2FY5MIZX7fxHhuSQVQc2xlbGV0%2BWAkF4%3D
Vulnerable Package

Comment on lines +4 to +7
workflow_run:
workflows: ["Build Browser"]
types:
- completed
Copy link
Contributor Author

@jprusik jprusik Aug 11, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While this triggers on PR merge (and other event) build success, it will skip the (final) dispatch step, as the "Get changed files" step will yield no changes.

Comment on lines +32 to +33
- 'apps/browser/src/background/**'
- 'apps/browser/src/platform/services/browser-script-injector.service.ts'
Copy link
Contributor Author

@jprusik jprusik Aug 11, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not all of these locations are owned by @bitwarden/team-autofill-dev, but are included because of their common impact on the owned Autofill experience.

Conversely, not all Autofill ownerships are reflected here as they are not relevant to this testing.

@jprusik jprusik marked this pull request as ready for review August 12, 2025 17:32
@jprusik jprusik requested a review from differsthecat August 12, 2025 17:33
@jprusik
Copy link
Contributor Author

jprusik commented Aug 12, 2025

Proper permissioning and success of dispatch tested and verified with #15988

differsthecat
differsthecat previously approved these changes Aug 12, 2025
Copy link
Member

@differsthecat differsthecat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great, thank you, @jprusik!

I have one small non-blocking nitpick

@@ -137,6 +137,7 @@ nx.json @bitwarden/team-platform-dev

## Autofill team files ##
apps/browser/src/autofill @bitwarden/team-autofill-dev
.github/workflows/test-browser-interactions.yml @bitwarden/team-autofill-dev
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit ⛏️ , I would put this at the top or bottom of this section, that will make it easier to read

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link

@jprusik jprusik merged commit ef60f5b into main Aug 13, 2025
32 checks passed
@jprusik jprusik deleted the pm-5756 branch August 13, 2025 14:48
blackwood pushed a commit that referenced this pull request Aug 13, 2025
…etion with autofill-affecting file changes (#15960)

* trigger Autofill BIT checks on browser build workflow completion and autofill-affecting file changes

* further adjustments

* hardcode bitwarden owner

* remove unneeded origin_repo data in dispatch payload

* add ownership for workflow

* use actions/create-github-app-token

* update CODEOWNERS line with suggestion
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants